Offensive Security📣 Job Ad

Offensive Security Internship at Help AG

Help AG is offering an internship opportunity within its Offensive Security Team in Riyadh. This program is designed for students to gain practical experience in enterprise security technologies, focusing on identifying vulnerabilities and enhancing security postures through controlled testing and assessments. Interns will work with the tools, techniques, and methodologies employed by the offensive security team to simulate real-world cyber threats.

Role Overview and Responsibilities

The internship will involve working closely with the current team to understand the Vulnerability Assessment and Penetration Testing (VAPT) process. Key responsibilities include assisting in basic vulnerability assessments, supporting ongoing penetration testing activities, and aiding in the identification, validation, and documentation of security vulnerabilities. Interns will also support reconnaissance and information gathering activities under guidance, collaborate with internal teams on findings and remediation discussions, and actively participate in labs and simulations to develop offensive security skills.

• Assist in performing basic vulnerability assessments and support penetration testing.
• Support the team in identifying, validating, and documenting security vulnerabilities.
• Assist in reconnaissance and information gathering activities.
• Work with internal teams to understand findings and support remediation discussions.
• Participate in labs, simulations, and internal exercises to build offensive security skills.
• Complete training on at least 3 offensive security tools/areas (*, Burp Suite, Metasploit, Nmap, OWASP Top 10) and aim for relevant certifications.
• Assist in preparing reports, project documentation, Proofs of Concept (POCs), and internal knowledge-sharing materials.

Qualifications and Skills

Candidates should be pursuing or have recently completed a Bachelor's degree in Computer Science, Cybersecurity, or a related field. A specialization or coursework in offensive security, penetration testing, or ethical hacking is preferred. A solid understanding of TCP/IP, the OSI model, common protocols (HTTP/S, DNS, SMB, SSH), and basic network troubleshooting is required. Working knowledge of Linux command line (Kali, Parrot, or Ubuntu) and scripting fundamentals in Python or Bash is necessary. Familiarity with offensive security concepts such as reconnaissance, vulnerability scanning, exploitation basics, and the MITRE ATT&CK framework is expected.

• Pursuing or recently completed a Bachelor's in Computer Science, Cybersecurity, or related field.
• Solid understanding of TCP/IP, OSI model, common protocols, and network troubleshooting.
• Working knowledge of Linux command line and Python/Bash scripting.
• Familiarity with offensive security concepts and the MITRE ATT&CK framework.
• Understanding of OWASP Top 10 and basic web application security concepts.
• Strong written and verbal English communication skills; Arabic is an advantage.
• Proficiency with Microsoft Office (Word, Excel, PowerPoint).
• Curiosity, integrity, and evidence of self-driven learning (*, GitHub, write-ups, blog, HTB profile).

Desirable Experience and Certifications

Exposure to common offensive security tools such as Nmap, Burp Suite, Wireshark, or Metasploit is considered a plus. Hands-on practice through platforms like Hack The Box, TryHackMe, PortSwigger Web Security Academy, or CTF participation is highly desirable. Offensive security certifications are a strong advantage, with OSCP/OSCP+ being highly preferred. Candidates actively pursuing OSCP+ are particularly encouraged to apply. Flexibility with working hours during active engagements and a willingness to learn client-facing professionalism are also valued.

• Exposure to tools like Nmap, Burp Suite, Wireshark, Metasploit.
• Hands-on practice via platforms such as Hack The Box, TryHackMe, PortSwigger Web Security Academy, or CTF participation.
• Offensive security certifications are a strong plus (OSCP/OSCP+, PNPT, CRTP, eCPPT, eJPT).
• Willingness to adapt working hours and learn client-facing professionalism.

About Help AG

Help AG is the cyber security arm of e& enterprise, providing strategic consultancy and tailored information security solutions and services to enterprise businesses across the Middle East. Established in the region in 2004 and acquired by Etisalat group in 2020, Help AG has become a trusted IT security advisor. The company remains vendor-agnostic, trustworthy, and focused on cyber security, delivering value through best-of-breed technologies and expert service delivery teams to strengthen cyber defenses and safeguard businesses.

Internship Details

This is an internship position with 0-1 years of experience required, located in Riyadh. The work type is internship, and the salary is not disclosed.